| SYMBOL | COMMON_NAME | aka. SYNONYMS |
a relatively new threat actor that’s been operating since mid-2016 Group-IB has exposed the attacks committed by Silence cybercriminal group. While the gang had previously targeted Russian banks, Group-IB experts also have discovered evidence of the group's activity in more than 25 countries worldwide. Group-IB has published its first detailed report on tactics and tools employed by Silence. Group-IB security analysts' hypothesis is that at least one of the gang members appears to be a former or current employee of a cyber security company. The confirmed damage from Silence activity is estimated at 800 000 USD. Silence is a group of Russian-speaking hackers, based on their commands language, the location of infrastructure they used, and the geography of their targets (Russia, Ukraine, Belarus, Azerbaijan, Poland, and Kazakhstan). Although phishing emails were also sent to bank employees in Central and Western Europe, Africa, and Asia). Furthermore, Silence used Russian words typed on an English keyboard layout for the commands of the employed backdoor. The hackers also used Russian-language web hosting services.
| 2023-07-06 ⋅ CISA ⋅ Increased Truebot Activity Infects U.S. and Canada Based Networks Silence |
| 2023-06-12 ⋅ The DFIR Report ⋅ A Truly Graceful Wipe Out FlawedGrace Silence |
| 2023-06-01 ⋅ vmware ⋅ Carbon Black’s TrueBot Detection Silence |
| 2023-05-23 ⋅ loginsoft ⋅ Taming the Storm: Understanding and Mitigating the Consequences of CVE-2023-27350 Clop LockBit Silence |
| 2023-03-31 ⋅ malware.love ⋅ TrueBot Analysis Part III - Capabilities Silence |
| 2023-03-30 ⋅ IBM ⋅ X-Force Prevents Zero Day from Going Anywhere Silence |
| 2023-02-27 ⋅ PRODAFT Threat Intelligence ⋅ RIG Exploit Kit: In-Depth Analysis Dridex IcedID ISFB PureCrypter Raccoon RecordBreaker RedLine Stealer Royal Ransom Silence SmokeLoader Zloader |
| 2023-02-18 ⋅ malware.love ⋅ TrueBot Analysis Part II - Static unpacker Silence |
| 2023-02-12 ⋅ malware.love ⋅ TrueBot Analysis Part I - A short glimpse into packed TrueBot samples Silence |
| 2023-02-08 ⋅ Huntress Labs ⋅ Investigating Intrusions From Intriguing Exploits Silence |
| 2022-12-08 ⋅ Cisco Talos ⋅ Breaking the silence - Recent Truebot activity Clop Cobalt Strike FlawedGrace Raspberry Robin Silence Teleport |
| 2020-12-14 ⋅ Blueliv ⋅ Using Qiling Framework to Unpack TA505 packed samples AndroMut Azorult Silence TinyMet |
| 2020-07-21 ⋅ YouTube ( OPCDE with Matt Suiche) ⋅ vOPCDE #9 - A Journey into Malware HTTP Communication Channels Spectacles (Mohamad Mokbel) Alureon Aytoke Cobra Carbon System CROSSWALK danbot ProtonBot Silence |
| 2020-06-22 ⋅ CERT-FR ⋅ Évolution De Lactivité du Groupe Cybercriminel TA505 Amadey AndroMut Bart Clop Dridex FlawedGrace Gandcrab Get2 GlobeImposter Jaff Locky Marap Philadephia Ransom QuantLoader Scarab Ransomware SDBbot ServHelper Silence tRat TrickBot |
| 2020-04-23 ⋅ CERT-FR ⋅ LE GROUPE CYBERCRIMINEL SILENCE Silence |
| 2020-03-26 ⋅ Telekom ⋅ TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer Amadey Azorult Clop FlawedGrace Get2 SDBbot Silence TinyMet TA505 |
| 2020-01-13 ⋅ Github (Tera0017) ⋅ TAFOF Unpacker Clop Get2 Silence |
| 2019-08 ⋅ Group-IB ⋅ Silence 2.0 - Going Global Silence |
| 2019-08 ⋅ Group-IB ⋅ Attacks by Silence Silence DDoS Kikothac Silence |
| 2019-02-11 ⋅ One Night in Norfolk ⋅ How the Silence Downloader Has Evolved Over Time Silence |
| 2019-02-06 ⋅ One Night in Norfolk ⋅ Some Notes on the Silence Proxy Silence |
| 2019-01-24 ⋅ Reaqta ⋅ Silence group targeting Russian Banks via Malicious CHM Silence Silence group |
| 2018-09-05 ⋅ Group-IB ⋅ Silence: Moving into the Darkside Silence group |
| 2018-09-05 ⋅ ZDNet ⋅ New Silence hacking group suspected of having ties to cyber-security industry Atmosphere |
| 2017-11-01 ⋅ Kaspersky Labs ⋅ Silence – a new Trojan attacking financial organizations Silence Silence group |
| 2017-11-01 ⋅ Intezer ⋅ Silence of the Moles Silence |